DevSecOps Essentials: Secure Pipelines from Code to Production

Cyber Alchemy

Learn how to build secure pipelines that protect your code from development to production in our DevSecOps Essentials online event!

IntroductionSecurity shouldn't be a bottleneck. This fast-paced course equips you with actionable DevSecOps techniques to identify and fix vulnerabilities before they reach production. You'll learn how to embed security directly into your CI/CD pipelines using modern tools and real-world best practices.Why this course mattersMany security issues discovered during penetration testing could have been prevented with earlier, automated controls. By shifting security left, your teams can detect and fix vulnerabilities before they reach production reducing rework, risk, and time to fix. This course shows you how, with no vendor lock-in or big budgets required.Topics covered<ul><li>DevSecOps principles and shift-left culture: The importance of shift-left culture and how to implement it.</li><li>Supply-chain security &amp; SBOMs: Dependency hygiene, provenance checks, reproducible builds, signing, licence risk.</li><li>Secrets management in real life: Vaults, KMS, short-lived credentials, rotating keys, and automating scanning for accidental leaks.</li><li>DevSecOps pipelines &amp; continuous assurance: Static &amp; dynamic analysis, container image scanning, IaC linting, policy as code; gating releases with quality thresholds.</li><li>Free and open-source tools to automate security: A list of tools to incorporate security into your pipeline without spending money</li></ul>Key Take-awayFrom this course, you will:<ul><li>Understand how to build secure CI/CD pipelines</li><li>Gain a practical roadmap to implement DevSecOps in your environment</li><li>Learn to improve supply-chain integrity using SBOMs and dependency checks</li><li>Access a curated toolkit of free, open-source security tools</li><li>Discover how to prevent security debt through early and automated controls</li></ul>Who should attendDevelopers, DevOps engineers, platform teams, and anyone building or securing software delivery pipelines.DeliveryLive online deliveryContact us for face-to-face / private sessions.FacilitatorsNeil Richardson – Co-Founder &amp; Managing Director | Cyber AlchemyNeil has 15+ years of experience in cybersecurity, split between academia and strategic advisory roles. A former senior lecturer and now a fractional CISO to scale-ups, Neil specialises in aligning security with growth, helping companies protect funding rounds, launch securely, and simplify compliance. His experience includes 200+ strategic engagements and hands-on DevSecOps implementation for clients across fintech and medtech. A former Cyber Scheme Team Leader and CREST tester, Neil brings senior-level clarity to every course, making secure development something teams actually want to do.Luke Hill – Co-Founder &amp; Director | Cyber AlchemyLuke brings eight years of security experience across offensive testing, compliance, and operations, with a focus on infrastructure, cloud, and OT security. He’s assessed everything from medical devices to fintech platforms and is an expert in identifying misconfigurations, attack paths, and hardening gaps across complex environments. Holding AZ-500 and Cyber Scheme Team Member certifications, Luke’s training style is clear, pragmatic, and full of real-world war stories. He also leads weekly hacking labs for university students and contributes to bug bounty and security research projects.Ali Malik – Co-Founder &amp; Director | Cyber AlchemyAli brings over a decade of experience in cybersecurity, paired with eight years in software engineering, making him a rare hybrid who understands what secure development actually looks like in the real world. He’s a specialist in offensive security, DevSecOps, and secure software delivery in regulated industries like MedTech and EdTech. Holding Cyber Scheme Team Leader and ISO 27001 Lead Auditor certifications, Ali regularly advises on integrating security seamlessly into the development lifecycle. Beyond consultancy, he mentors students, leads Capture The Flag competitions, and keeps Cyber Alchemy at the cutting edge of secure development practices.

Our {communityGuidelinesLink} describe the sort of content we prohibit on Eventbrite. If you suspect an event may be in violation, you can report it to us so we can investigate.

To report other categories of prohibited or illegal content, submit {link}

DevSecOps Essentials: Secure Pipelines from Code to Production

More events from Cyber Alchemy

Discover more events from Cyber Alchemy, from Science & Tech to other experiences you might love.

Still looking for the right event?

Explore all online events to browse and filter by date, category, and more.

DevSecOps Essentials: Secure Pipelines from Code to Production

More events from Cyber Alchemy

Discover more events from Cyber Alchemy, from Science & Tech to other experiences you might love.

You might also like...

Browse more events with different dates, prices, and formats to find your next great experience.

Still looking for the right event?

Explore all online events to browse and filter by date, category, and more.